Re: [9fans] NAT'ing a drawterm connection

[andrey mirtchovski <mirtchov@cpsc.ucalgary.ca>]

On 25 Aug 2003, Rob Ristroph wrote:

> /sbin/iptables -t nat -A PREROUTING -p tcp --dport 567 -i eth0 -j DNAT --to 192.168.1.18:567
> /sbin/iptables -A FORWARD -m state --state RELATED -j ACCEPT

that's overcomplicating it, but so is the way of linux... :)

> Are those 17xxx connections extablished from drawterm to the cpu/auth
> server, or from the Plan 9 computer to drawterm ?

from drawterm.

andrey

ps: i've had the setup pasted in the original mail work for a year already
with any significant issues. there's also a NAT rule for the other way
around, but more often I leave people logged in to mount the auth server's
/net, which is outside the 192 network.

i only need to add new ports if they're required (when, for example, you
decide that drawterm is too slow and you want to run over a vnc connection).